b3bceade65a4d97da5d433b8558726bd8d94e249

In the function wma_mgmt_rx_process, wbuf is the allocated skb which houses the incoming management frame. An extra 100 bytes buffer is allocated in wbuf->data to avoid OOB access when additional headers are present in addition to ieee80211_frame. This additional buffer is uninitialized and can cause potential OOB for the management frames of length sizeof(struct ieee80211_frame) and have no IE or any data. Initialize the allocated extra bytes so that OOB is prevented. Change-Id: I44047b0c6f3a731c741c5e0217f3bd0cdd8ed4dc CRs-Fixed: 2249815
This is CNSS WLAN Host Driver for products starting from iHelium
Описание
Languages
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%